Skip to main content
flare
Get started

33-second walkthrough

Follow the evidence.

A service account received Owner access. See the finding, inspect the source event, and decide what to check next.

Recorded sample · Fictional data · Scripted replies · No live analysis

For small evidence text, use fullscreen. On a phone, turn your screen sideways.

Explore the interactive demo →Get started →
Read the transcript
  1. 0:00 A service account received Owner access. What would you check first?
  2. 0:05 Open the finding. Check the recorded change and the cited source ID.
  3. 0:10 Inspect the source event. A successful result does not establish approval.
  4. 0:20 Review the scripted guidance. Verify approved work; key creation remains unconfirmed.